Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier: Djen8eizFKYFUpkwc79C9U5yqkwpZsPW6/Z7DjyaxUA=
Subject key identifier: 53:A7:3B:C1:8C:49:F3:BE:BC:D0:06:B0:9B:69:A8:08:E7:BE:4E:74
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 0197B6A11E6B527016EFDC564F01DFE4026F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number: 0C4E
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: /Q6IiHwTtkWXW+gTVIctvkP4GVwNHpX97PQ1hyZREyc=)
2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:6b:52:70:16:ef:dc:56:4f:01:df:e4:02:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=53a73bc18c49f3bebcd006b09b69a808e7be4e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:ba:b5:90:cc:d5:81:94:a7:78:cd:98:03:
12:33:88:82:34:75:b6:11:7c:83:96:c6:5b:ec:2c:
7d:a4:6b:ad:05:79:38:a3:4b:b5:c4:77:81:4d:be:
78:42:a2:36:ba:c5:ae:49:5e:18:9d:8a:6a:e3:b6:
33:c8:7e:31:a7:78:26:5e:00:d3:b6:7a:91:65:6a:
3e:06:7c:57:19:26:2e:9b:90:52:68:2a:ec:b4:5c:
f6:99:cb:ce:fb:11:c0:be:05:a9:1a:e9:f5:58:62:
17:43:f3:62:5b:ab:92:59:b4:a4:6b:be:24:97:f8:
f1:d4:a8:68:ed:42:68:81:d2:2c:b5:fa:57:91:b7:
97:19:e1:98:93:f9:ab:2f:b3:ec:4e:f0:b9:8f:77:
0e:c6:d3:8a:8a:67:7a:70:20:63:db:00:d9:32:e6:
c4:c3:ee:76:9f:d6:ac:c3:57:33:6e:12:e9:7c:fe:
15:c9:26:cd:30:8d:78:21:70:97:12:ff:65:e7:fa:
ca:3b:6e:49:73:24:a3:06:be:4f:e1:a6:8e:97:0f:
dd:42:3d:10:e0:47:05:25:fd:00:9f:98:53:4a:21:
12:32:8c:28:1d:51:64:c5:fc:db:7c:30:1c:10:72:
4a:dd:35:93:05:ca:45:27:b0:2d:fe:1d:f5:83:29:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:3B:C1:8C:49:F3:BE:BC:D0:06:B0:9B:69:A8:08:E7:BE:4E:74
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:7c:18:67:8c:a7:d0:4d:36:43:d2:51:7e:88:c9:e1:fd:
e8:eb:b7:89:ac:d1:30:fc:6b:45:e8:f3:e5:97:ba:4c:c0:e3:
2e:f3:0a:0d:6f:58:bc:ad:ad:16:ce:2e:e6:b8:a5:1a:17:09:
ac:bc:de:69:f6:87:36:2c:c5:29:23:9b:7f:01:fe:bd:d6:1e:
ad:7b:f8:82:e1:a3:33:55:7f:d0:ec:c3:4b:73:8d:ab:4a:b6:
b3:c9:c8:58:0e:21:1c:d3:73:80:e4:51:40:6f:a1:bd:29:33:
05:e9:59:30:6a:28:62:0a:1c:a2:df:11:75:28:5a:79:ca:fd:
39:a6:0d:f7:82:49:f9:e8:a0:04:4d:78:c5:97:39:0c:fb:31:
a4:d9:aa:91:85:32:e6:65:9b:05:dc:97:c6:fb:a5:ef:ea:72:
d2:76:b5:44:9f:2d:07:c7:d1:23:04:8d:9f:b9:e6:45:f0:29:
0e:ef:d3:78:8f:1d:26:5a:a0:2c:b5:21:ff:a2:c3:a9:9e:64:
a2:7e:9b:ca:db:e6:c8:31:73:87:37:de:bc:9b:9a:78:e6:59:
f1:34:57:ba:b5:b3:42:b6:c9:1e:bd:98:f5:f4:72:9e:80:c1:
36:c9:bf:57:99:2a:c6:4b:18:cc:af:ae:b8:f0:01:d9:29:b1:
2a:e2:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:29 2025 by rpki-client